$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70e8e83b-33ea-3ea5-9eb7-5fc0b1830c27.roa File: 70e8e83b-33ea-3ea5-9eb7-5fc0b1830c27.roa (raw, json) Hash identifier: KJFrd/u0XuE3Ry1FkkuqEzKlIt49W7S401/cHmTU/lU= Subject key identifier: 67:55:87:77:86:C8:CE:92:30:F9:B4:46:63:FF:8F:E8:71:7A:A9:42 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499C1221643C3D8B5E351F9080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70e8e83b-33ea-3ea5-9eb7-5fc0b1830c27.roa Signing time: Tue 22 Apr 2025 10:36:27 +0000 ROA not before: Tue 22 Apr 2025 10:36:27 +0000 ROA not after: Mon 21 Jul 2025 10:36:27 +0000 asID: 19905 IP address blocks: 173.27.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:12:21:64:3c:3d:8b:5e:35:1f:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 10:36:27 2025 GMT Not After : Jul 21 10:36:27 2025 GMT Subject: CN=4a9077bd-fa3d-467b-88b7-80708c4da0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:df:d9:3a:2e:e8:9f:bf:aa:6d:5b:f4:ec:52: 67:51:3d:58:66:fa:6d:b6:40:e1:6e:d6:4d:03:3c: 20:5d:88:3d:8e:95:28:76:f3:84:0a:0c:21:de:0f: 0d:ed:06:e2:9a:94:77:b8:66:d1:6f:0d:b2:a8:bf: 43:95:04:ff:84:7b:bc:85:d1:96:cd:d3:2a:55:27: 99:62:69:be:cd:c9:8c:73:18:33:fd:f1:cd:d5:68: 44:85:cd:77:f4:02:43:fc:9f:88:74:d1:09:b3:e8: 80:23:44:f7:47:24:db:02:5a:e5:b8:46:a8:94:22: 02:e2:11:cb:ac:b4:65:ff:07:68:b4:56:75:15:69: bc:ec:17:97:93:d6:88:4f:9f:f1:fc:79:ce:7f:ca: 48:53:0b:6b:ba:99:08:8a:81:2c:89:60:4f:1e:ef: 51:c6:61:b2:bf:dd:74:b5:d0:3e:03:98:4d:c7:a8: 53:19:de:2d:b7:80:ec:6f:67:c9:9c:84:02:41:62: 5e:f1:d3:4e:6b:71:35:d3:9e:f7:84:98:85:e3:15: 24:15:4a:40:61:7b:8a:f9:81:48:d0:b3:1a:b1:85: 61:64:82:4d:5e:22:28:d6:2d:ad:51:1d:9c:be:9a: a3:0f:e6:e9:05:4c:65:cf:68:55:93:09:6d:41:46: a8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:55:87:77:86:C8:CE:92:30:F9:B4:46:63:FF:8F:E8:71:7A:A9:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70e8e83b-33ea-3ea5-9eb7-5fc0b1830c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:77:d8:64:77:2a:97:e0:d1:d9:e8:cd:10:cb:39:b2:c0:b8: 01:29:0c:78:47:2b:e7:15:fc:f0:2e:07:03:93:7a:25:59:0a: 5f:43:79:a1:7b:aa:fd:80:bb:92:cf:5f:b1:2b:1e:d5:c0:23: e1:f4:18:ed:38:3f:27:4e:55:66:6e:a9:f8:46:bd:17:26:0c: 3d:7c:d4:54:a7:00:ff:0e:40:e2:ee:c0:ef:b1:38:bf:7f:8a: 32:95:fe:4b:46:a2:28:b6:37:af:ca:8c:b8:35:56:02:a7:5f: 76:72:72:d0:2f:54:b9:4e:01:0c:53:f8:72:52:61:82:52:b3: a4:0a:98:0f:23:64:80:b2:e2:75:87:20:2c:06:1a:75:ea:04: 85:f1:e2:fe:28:08:56:26:ee:b2:3b:0c:c2:83:5e:35:73:90: da:8f:19:61:7a:59:b0:26:6f:2b:1f:f4:59:13:61:9e:12:8d: 4a:88:75:e6:bd:15:0a:50:5f:13:2c:13:a1:bf:a1:f5:22:b9: c9:64:a6:b7:60:68:7c:a4:4e:6f:54:a5:12:7c:1c:82:a2:72: 63:dd:53:86:68:b8:ba:b4:ef:ed:b0:8d:2c:db:cd:14:c0:c9: f4:4e:b3:ff:b0:8c:1a:e6:42:f2:93:8a:58:2b:36:e7:74:28: 33:36:1b:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcEiFkPD2LXjUfkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjEwMzYyN1oXDTI1MDcyMTEwMzYyN1owLzEtMCsGA1UEAxMk NGE5MDc3YmQtZmEzZC00NjdiLTg4YjctODA3MDhjNGRhMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2N/ZOi7on7+qbVv07FJnUT1YZvpttkDhbtZN AzwgXYg9jpUodvOECgwh3g8N7QbimpR3uGbRbw2yqL9DlQT/hHu8hdGWzdMqVSeZ Ymm+zcmMcxgz/fHN1WhEhc139AJD/J+IdNEJs+iAI0T3RyTbAlrluEaolCIC4hHL rLRl/wdotFZ1FWm87BeXk9aIT5/x/HnOf8pIUwtrupkIioEsiWBPHu9RxmGyv910 tdA+A5hNx6hTGd4tt4Dsb2fJnIQCQWJe8dNOa3E10573hJiF4xUkFUpAYXuK+YFI 0LMasYVhZIJNXiIo1i2tUR2cvpqjD+bpBUxlz2hVkwltQUao3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdVh3eGyM6SMPm0RmP/j+hxeqlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzBlOGU4M2ItMzNlYS0z ZWE1LTllYjctNWZjMGIxODMwYzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZ32GR3Kpfg0dnozRDLObLAuAEpDHhHK+cV/PAuBwOTeiVZCl9DeaF7 qv2Au5LPX7ErHtXAI+H0GO04PydOVWZuqfhGvRcmDD181FSnAP8OQOLuwO+xOL9/ ijKV/ktGoii2N6/KjLg1VgKnX3ZyctAvVLlOAQxT+HJSYYJSs6QKmA8jZICy4nWH ICwGGnXqBIXx4v4oCFYm7rI7DMKDXjVzkNqPGWF6WbAmbysf9FkTYZ4SjUqIdea9 FQpQXxMsE6G/ofUiuclkprdgaHykTm9UpRJ8HIKicmPdU4ZouLq07+2wjSzbzRTA yfROs/+wjBrmQvKTilgrNud0KDM2G58= -----END CERTIFICATE-----Generated at Sat Apr 26 20:52:11 2025 by rpki-client